EtwpInitializeProviderInfoBuffer

VOID __stdcall EtwpInitializeProviderInfoBuffer(
        _WMI_LOGGER_CONTEXT *LoggerContext,
        _WMI_BUFFER_HEADER *Buffer,
        UINT64 BufferSize){
  int v3; 
  __int64 v6; 

  v3 = BufferSize;
  EtwpInitializeBufferHeader(LoggerContext, Buffer);
  *(_DWORD *)Buffer = v3;
  EtwpResetBufferHeader(Buffer, 7u);
  *((_DWORD *)Buffer + 11) = 3;
  *((_WORD *)Buffer + 26) = 1;
  *(_ETW_REF_CLOCK *)((char *)Buffer + 56) = LoggerContext->ReferenceTime;
  v6 = *((_QWORD *)Buffer + 4) ^ (*((_DWORD *)Buffer + 8) ^ LoggerContext->ClockType) & 7;
  *((_QWORD *)Buffer + 4) = v6;
  switch( LoggerContext->ClockType )
  {
    case 1u:
      goto LABEL_2;
    case 3u:
      *((_QWORD *)Buffer + 4) = v6 & 7 | (8i64 * *(&ExBootDevicesRemovedEvent + 381));
      return;
    case 4u:
LABEL_2:
      *((_QWORD *)Buffer + 4) = (8i64 * *(&ExBootDevicesRemovedEvent + 189)) | v6 & 7;
      break;
  }
}

Referenced by:

EtwpRealtimeNotifyConsumers
EtwpSendDbgId